Low
CVE-2022-40199
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2022-3600
Easy Digital Downloads <= 3.1.0.1.1 - Unauthenticated CSV Injection
Medium
CVE-2022-32776
Advanced Ads – Ad Manager & AdSense <= 1.31.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2021-36899
Asset CleanUp: Page Speed Booster <= 1.3.8.4 - Reflected Cross-Site Scripting
Medium
6619b370-dd2a-4945-a776-1fecf407119e
wp-Monalisa <= 6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-41615
Store Locator WordPress <= 1.4.5 - Cross-Site Request Forgery to Cross-Site Scripting
Critical
CVE-2022-21797
The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the eval() statement.
High
CVE-2022-3295
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.
Medium
CVE-2022-3301
Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8.
Medium
CVE-2022-21169
express-xss-sanitizer vulnerable to Prototype Pollution via allowedTags attribute
Medium
CVE-2022-40044
Centreon contains cross-site scripting vulnerability via esc_name parameter
High
CVE-2022-40043
Centreon SQL Injection vulnerability via esc_name parameter
High
CVE-2022-3272
Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.
High
CVE-2022-3298
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.
Medium
CVE-2022-40218
TH Advance Product Search <= 1.1.4 - Missing Authorization to Plugin Settings Change
Medium
CVE-2022-3622
Blog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Medium
f52f6d55-d0f5-4eba-bc07-ed94bded8777
Sabai Discuss <= 1.4.13 - Reflected Cross-Site Scripting
Medium
CVE-2022-38057
TH Advance Product Search <= 1.1.4 - Missing Authorization to Plugin Settings Reset
Medium
CVE-2021-36839
Social Media Follow Buttons Bar <= 4.73 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-34654
Manage Notification E-mails <= 1.8.2 - Cross-Site Request Forgery to Plugin Options Update
Medium
CVE-2022-41638
Pop-Up Chop Chop <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-35730
Oceanwp sticky header <= 1.0.8 - Cross-Site Request Forgery to Plugin Settings Update
Medium
24349a73-d543-433b-9f7c-b12f914fc80f
Forym <= 1.5.8 - Reflected Cross-Site Scripting
High
CVE-2022-3290
Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.